Compliance and ISO Audit Executive

You will be responsible for assessing internal processes to ensure compliance with ISO standards, Information Security requirements, PCI-DSS, and other relevant regulatory and industry guidelines. This role involves preparing documentation, collaborating with various teams to provide guidance, and conducting thorough analysis to meet all audit compliance requirements. You will work directly with card payment schemes and audit organizations to ensure licensing and audit conditions are fulfilled.

Key Responsibilities

- Engage with Payment Schemes and Third-Party Audit organizations to manage licensing and audit activities.
- Develop a strong understanding of Card Payment Schemes and their standards, including ISMS, PCI DSS, ISO9001, and ISO27001.
- Lead the implementation and management of security programs with hands-on involvement.
- Plan, conduct, and lead internal audits focused on information security and PCI-DSS compliance.
- Draft, review, and maintain security policies and procedures to ensure ongoing compliance and effectiveness.
- Design and deliver awareness and training sessions tailored for both technical and non-technical staff.
- Create and maintain security roadmaps to guide the development and continuous improvement of security programs.
- Perform Information Security Compliance tasks independently, demonstrating strong analytical and problem-solving skills.
- Apply a rational, pragmatic, and realistic approach to security, risk management, and compliance challenges.
- Communicate effectively across all organizational levels, including senior and executive management.
- Produce high-quality documentation such as business requirements, design documents, test cases, and end-user training guides.
- Exhibit excellent interpersonal, verbal, written, and presentation communication skills.
- Demonstrate a positive attitude, be a proactive team player, and work independently with initiative.
- Utilize project management skills to translate business requirements into technical IT security deliverables.
- Prepare detailed reports and presentations to communicate findings and recommendations clearly.
- Conduct ongoing research to enhance security knowledge and capabilities.

Required Qualifications

- Bachelor’s degree in IT, Management, or a related field.
- Minimum of 2 to 4 years of relevant experience in information security or compliance roles.
- Experience working with payment schemes and understanding their operational requirements.
- Solid knowledge of payment card industry standards, including PCI-DSS and ISO9001.
- Familiarity with security and privacy controls, regulatory environments, and risk management principles.
- Proven experience in developing and implementing policies, standards, and procedures related to security and operational compliance.

Preferred Qualifications and Benefits

- Experience in delivering training and awareness programs for diverse audiences.
- Strong project management capabilities and the ability to manage multiple priorities effectively.
- Opportunity to work in a dynamic environment located in PECHS, Block 6, Karachi.
- Full-time position with working hours from 9:00 AM to 6:00 PM.
- This is an in-person role requiring physical presence at the work location.

Applicants are requested to include their current pay scale when submitting their application.